Red Hat Security AdvisoryRHSA-2026:94508
kernel security, bug fix, and enhancement update
Released 2026-11-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.117.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.117.1.el10_0, kernel-64k-devel-6.12.0-55.117.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.117.1.el10_0, kernel-64k-6.12.0-55.117.1.el10_0, kernel-64k-core-6.12.0-55.117.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.117.1.el10_0, libperf-6.12.0-55.117.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.117.1.el10_0, kernel-rt-64k-6.12.0-55.117.1.el10_0, kernel-rt-64k-core-6.12.0-55.117.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.117.1.el10_0, kernel-rt-core-6.12.0-55.117.1.el10_0, kernel-rt-debug-6.12.0-55.117.1.el10_0 +11
Fixes 7 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer iscsi_tcp_hdr_dissect() receives the data segment of several PDU types int…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00399 · Published 2026-08-15 · Partial fix · 5.10.265, 5.15.216 +6
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path In nvmet_tcp_try_recv_ddgst(), when a data digest mismatch is detected, nvmet_…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00323 · Published 2026-07-27 · Partial fix · 5.10.261, 5.12 +6 CWE-667
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->in…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0076 · Published 2026-10-15 · Partial fix · 5.10.272, 5.15.223 +6
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can now be called during the reset path, we should also…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00347 · Published 2026-07-19 · Partial fix · 5.19, 5.20 +6 CWE-400
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix host memory disclosure on R2T for a read command nvme_tcp_handle_r2t() does not check the direction of the request the R2T refers to.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00432 · Published 2026-09-11 · Partial fix · 5.10.273, 5.15.224 +6
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change [email protected] says: The vulnerability is a rac…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00174 · Published 2026-01-13 · Partial fix · 5.10.248, 5.15.198 +5 CWE-362
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRM_MSG_ALLOCSPI Netlink message, which triggers the kernel function xfr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2025-09-12 · Partial fix · 6.1.191, 6.6.103 +4
THREATIST.IORead the docs